N10-009 Network Security Practice Question
An attacker is eavesdropping on network traffic to capture sensitive data sent over an unencrypted HTTP connection. Which technology should be implemented to protect data in transit between clients and web servers?
⚠ Common exam trap
CompTIA often tests the distinction between encryption protocols by layering (e.g., IPSec at Layer 3 vs. TLS at Layer 4/Application), causing candidates to pick IPSec because it is a well-known security protocol, even though it does not directly protect HTTP traffic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SSL/TLS
SSL/TLS (Secure Sockets Layer/Transport Layer Security) operates at the application layer to encrypt HTTP traffic, creating HTTPS. This ensures that data transmitted between clients and web servers is encrypted, preventing eavesdroppers from reading sensitive information like passwords or credit card numbers. TLS is the standard protocol for securing HTTP communications, as defined in RFC 8446.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
SSL/TLS
Why this is correct
SSL/TLS (Secure Sockets Layer/Transport Layer Security) is the foundational protocol suite for encrypting communication over computer networks, most notably for securing web traffic via HTTPS. When an attacker attempts to eavesdrop on web sessions, SSL/TLS encrypts the data at the application layer, ensuring confidentiality, integrity, and authenticity between the client and server. This prevents unauthorized parties from reading or tampering with sensitive information exchanged during browsing.
- ✗
IPSec
Why it's wrong here
IPSec (Internet Protocol Security) is a suite of protocols that provides cryptographic security services at the network layer (Layer 3) of the OSI model, commonly used for Virtual Private Networks (VPNs). It encrypts entire IP packets, offering end-to-end security for network traffic between two endpoints, such as a client and a VPN gateway. However, IPSec is not typically employed to secure individual web sessions directly from a browser to a web server; instead, SSL/TLS handles that application-layer encryption.
When this WOULD be correct
IPSec would be correct in a scenario where an organization needs to secure all traffic between two network segments (e.g., branch office and headquarters) over an untrusted network, such as the internet, by creating an encrypted VPN tunnel.
- ✗
SSH
Why it's wrong here
SSH (Secure Shell) is a cryptographic network protocol primarily used for secure remote access to computers, enabling secure command-line interfaces, remote execution of commands, and secure file transfers (SFTP/SCP). It establishes a secure channel over an unsecured network, operating at the application layer. While SSH provides robust encryption for its specific use cases, it is not designed or utilized for encrypting general web browsing traffic that an attacker might eavesdrop on.
When this WOULD be correct
An exam question asks: 'Which protocol provides encrypted remote shell access and secure file transfer over an unsecured network?' In that context, SSH is the correct answer.
- ✗
SNMPv3
Why it's wrong here
SNMPv3 (Simple Network Management Protocol version 3) is designed for securely managing and monitoring network devices, providing authentication, privacy, and integrity for management messages. While it offers strong security features for its specific purpose, it operates at the application layer to facilitate device configuration and status reporting, not to encrypt general web browsing traffic. Therefore, an attacker eavesdropping on web sessions would not be thwarted by SNMPv3, as it doesn't secure HTTP/HTTPS communications.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓SSL/TLSCorrect answer▾
Why this is correct
SSL/TLS (Secure Sockets Layer/Transport Layer Security) is the foundational protocol suite for encrypting communication over computer networks, most notably for securing web traffic via HTTPS. When an attacker attempts to eavesdrop on web sessions, SSL/TLS encrypts the data at the application layer, ensuring confidentiality, integrity, and authenticity between the client and server. This prevents unauthorized parties from reading or tampering with sensitive information exchanged during browsing.
✗IPSecWrong answer — click to see why▾
Why this is wrong here
IPSec is designed to secure IP communications by encrypting and authenticating IP packets, but it operates at the network layer and is typically used for site-to-site VPNs or remote access, not for protecting individual HTTP sessions between clients and web servers.
★ When this WOULD be the correct answer
IPSec would be correct in a scenario where an organization needs to secure all traffic between two network segments (e.g., branch office and headquarters) over an untrusted network, such as the internet, by creating an encrypted VPN tunnel.
Why candidates choose this
Candidates may confuse IPSec as a general encryption protocol for all network traffic, not realizing that for web traffic (HTTP), SSL/TLS is the standard and more appropriate solution at the application layer.
✗SSHWrong answer — click to see why▾
Why this is wrong here
SSH is used for secure remote administration and file transfers, not for protecting HTTP web traffic between clients and servers. It does not integrate with HTTP to encrypt web sessions.
★ When this WOULD be the correct answer
An exam question asks: 'Which protocol provides encrypted remote shell access and secure file transfer over an unsecured network?' In that context, SSH is the correct answer.
Why candidates choose this
Candidates may confuse SSH with SSL/TLS because both use encryption and have 'secure' in their names, leading them to think SSH can secure web traffic.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
OSI Model Reference
| Layer | Name | PDU | Key Protocols / Devices |
|---|---|---|---|
| 7 | Application | Data | HTTP, HTTPS, DNS, SMTP, FTP, SSH |
| 6 | Presentation | Data | TLS / SSL, JPEG, ASCII encoding |
| 5 | Session | Data | NetBIOS, RPC, SIP |
| 4 | Transport | Segment / Datagram | TCP, UDP |
| 3 | Network | Packet | IP, ICMP, OSPF — Routers |
| 2 | Data Link | Frame | Ethernet, Wi-Fi, PPP — Switches, Bridges |
| 1 | Physical | Bits | Cables, NICs, Hubs, Repeaters |
Go deeper
Related to this question
Learn chapter
Network Device Hardening
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP that encrypts data between a web browser and a web server using SSL/TLS protocols.
About these practice questions
This N10-009 question is part of Courseiva's 464-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.